CVE-2003-0943

2003-11-2105:00:00

mitre

www.cve.org

sap db

web-tools

default services

vulnerability

remote attackers

sensitive information

redirect attacks

internal databases

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

80.5%

JSON

web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm).

References

www.atstake.com/research/advisories/2003/a111703-2.txt